Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
File: IwNA0n5LJPkSSXcyLts2lC4tFgw.mft (raw, json)
Hash identifier: PrviVrAOoIPCZUbhixcJz3N+ZD0A17HXUa1GWOtTKlA=
Subject key identifier: FF:A6:AA:31:FA:8C:5F:72:82:FD:03:27:1D:14:14:D8:CA:36:24:5A
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial: 01987F784B40695D9672BD593BB0D03EB70E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 13:00:46 +0000
Manifest this update: Wed 06 Aug 2025 13:00:46 +0000
Manifest next update: Thu 07 Aug 2025 13:00:46 +0000
Files and hashes: 1: 8BE15BYRjJfhZasQiCcSRq-1rvE.roa (hash: owl3mrEo7nmudL7UJFk7qfjK5dtTSEPpdF0yRa2bSts=)
2: 8pfPZSOu9OxWh0zIohg91aPGe8w.roa (hash: c5LZlJIp5DIk0u0EVUZdwpG29wBKxdLqbOnohSJsuL0=)
3: IwNA0n5LJPkSSXcyLts2lC4tFgw.crl (hash: WtAutpKABGybWth6REQ1VSOWRtg0jJmqqEc0s4JzUmU=)
4: W5_MS3jBPdXrXt2CXzKVEDSySg4.roa (hash: 5kr0YkXkQlloL0Dx58yHdS9CGeVUoXp4B0GMVprtw4I=)
5: YZdW1FTou_f-R0pbpF5XZ4Tx3hg.roa (hash: zlg3+gSw7tZCxS27EU5I1VhaiNCdA3Z7IiLzIapPksE=)
6: j5QKeuGXTRBwPGjQWWnfRFS80gs.roa (hash: Z4Hp9oqaE6vPUIIGvGUpRfdgDDW4cmfUljTJCbGbKQk=)
7: nAr5TcbaRaUgvGs6GhoEMZYw2k4.roa (hash: PsVErZ9iC+yU1AQTc2kN6DO2ltE02bbxJGF/AxC6Z9Q=)
8: qH4AOngGgCDKos4oiBE8L48PaSU.roa (hash: wAl3jqMD73juUqzGb6OKFl9PHSoZSU+evXbe0KXVLu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:78:4b:40:69:5d:96:72:bd:59:3b:b0:d0:3e:b7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
Validity
Not Before: Aug 6 13:00:46 2025 GMT
Not After : Aug 7 13:00:46 2025 GMT
Subject: CN=ffa6aa31fa8c5f7282fd03271d1414d8ca36245a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f7:70:ac:40:67:ec:99:22:66:49:90:60:63:
18:7f:73:cb:b0:70:0c:6b:f6:0c:5d:f3:14:43:a0:
6d:5c:9a:cb:88:fc:a0:96:a5:ad:bc:06:34:97:f6:
b8:5f:9a:5e:53:47:95:3f:2e:93:69:8b:fb:d0:7c:
04:3f:27:64:13:80:f5:3f:0b:d7:97:9a:d2:e7:eb:
83:a8:e4:8e:c3:83:dd:2d:1c:45:54:4d:50:34:c0:
0a:0c:b1:11:79:01:2a:67:31:d4:0e:eb:a1:43:a2:
78:88:c6:d3:7d:9a:17:f4:33:5e:4e:80:b2:9b:75:
07:01:18:91:7e:6e:c6:03:de:53:10:78:32:04:df:
e6:d2:a5:aa:26:6f:10:ee:9b:cd:54:e2:9a:9f:d0:
0b:a0:b1:12:74:c0:68:6c:ff:ad:0d:d1:be:f0:7e:
84:cb:c0:ba:da:b0:51:14:18:b3:a7:77:b5:35:09:
91:03:5b:b5:d7:dd:3f:f2:ff:6e:ac:83:de:66:39:
63:e6:93:1e:46:d3:29:4b:d2:05:8a:5c:e7:a8:77:
45:71:21:60:57:c0:89:72:3e:09:b7:88:d2:22:72:
b2:3d:a5:03:c6:35:c1:af:ec:9c:61:35:6c:37:94:
a0:61:95:a0:1b:b2:71:c9:56:0d:e9:40:c7:38:5f:
f2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A6:AA:31:FA:8C:5F:72:82:FD:03:27:1D:14:14:D8:CA:36:24:5A
X509v3 Authority Key Identifier:
keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:f9:96:3f:11:61:ef:29:e2:4d:9a:f7:7b:92:f2:66:df:80:
3b:f0:3d:35:84:7e:8f:e6:b2:ca:5e:6f:c0:eb:4c:27:50:12:
81:96:ab:a0:3d:2c:69:2e:fb:ea:e5:c0:0f:cf:27:2c:8f:4c:
f1:6f:df:3e:f4:e9:6e:49:66:13:96:f2:be:1a:e6:3b:b9:40:
e9:72:b5:36:1f:c1:77:f5:6b:26:85:e1:ad:6f:63:2f:ff:dc:
88:dc:ac:e4:2a:cf:c8:0f:a2:ca:ad:23:60:f0:a6:9b:f3:9c:
1d:e3:ac:b1:1a:db:aa:e2:5d:2b:43:08:e1:a5:b9:91:c7:1f:
d7:ab:95:85:16:fe:b1:8a:c4:0b:31:f6:64:24:0d:35:74:da:
b1:95:b7:8c:54:14:2c:ea:f6:90:c9:e0:61:3d:77:5a:4f:c4:
7a:a9:0e:35:4b:2c:ae:d9:27:f1:e1:f6:39:25:fd:69:ed:68:
f2:74:8a:2d:8e:10:a2:6c:00:c1:30:a3:f8:e5:44:dd:e4:da:
df:2a:1c:e5:fd:b6:df:3d:76:95:ea:dc:79:bb:78:d7:dc:f2:
0a:5f:70:69:7e:91:02:01:d0:86:dd:fc:46:4d:4c:7c:9b:f7:
db:ad:66:21:6f:d5:5e:cd:c3:f9:35:c5:45:6b:7d:61:80:f8:
a1:ab:57:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:37:00 2025 by rpki-client